I study security and share my knowledge.

Recent posts

Deserialize_Vulnability for Python_Pickle

Deserialize๋ž€? ์—ญ ์ง๋ ฌํ™”๋กœ ์จ ์ง๋ ฌํ™”๋œ ๋ฐ์ดํ„ฐ ์ฆ‰ ๋ฐ”์ดํŠธ ์ŠคํŠธ๋ฆผ์„ ์—ญ์—ฐ์‚ฐ ํ•˜๋Š” ๊ณผ์ •์„ ๋งํ•œ๋‹ค. Serialization? ๊ณ„์ธต ๊ตฌ์กฐ์˜ ๋ฐ์ดํ„ฐ๋ฅผ ๋ฐ”์ดํŠธ ์ŠคํŠธ๋ฆผ์œผ๋กœ ๋ณ€ํ™˜ํ•˜๋Š” ์ž‘์—…์„ ๋œปํ•˜๋ฉฐ, ๊ฐ์ฒด๋ฅผ ์ €์žฅ ๋ฐ ์ „์†ก์˜ ํŽธ๋ฆฌํ•จ ๋ฐ ๋‹ค๋ฅธ ํ”Œ๋ ›ํผ์—์„œ ์‚ฌ์šฉํ•˜๊ฑฐ๋‚˜, ๊ฐ...

401&403(Access Control) Bypass

HTTP ์ƒํƒœ์ฝ”๋“œ 401&403 ํŠน์ • ํŽ˜์ด์ง€๋“ค์„ ์‚ดํŽด๋ณด๋‹ค ๋ณด๋ฉด, HTTP ์ƒํƒœ์ฝ”๋“œ๋กœ 401 ๋˜๋Š” 403์œผ๋กœ ๋ฐ˜ํ™˜๋˜๋Š” ๊ฒฝ์šฐ๊ฐ€ ์ข…์ข… ์žˆ๋‹ค. ์ด ๋‘ ์ข…๋ฅ˜์˜ ์ฝ”๋“œ๋Š” ๋ฌด์—‡์ผ๊นŒ? 401 Unauthorized HTTP ํ‘œ์ค€์—์„œ Unatuhorized(๋ฏธ์Šน์ธ)์œผ๋กœ ๋ช…์‹œํ•˜...

ZIP Slip Vulnerability

์ทจ์•ฝ์ ์€ Path Traversal ์ทจ์•ฝ์ ์˜ ํ•œ ๋ถ€๋ถ„์œผ๋กœ ์•„์นด์ด๋ธŒ ํŒŒ์ผ์—์„œ ํŒŒ์ผ์„ ์ถ”์ถœํ•˜๋Š” ๋™์•ˆ ๋””๋ ‰ํ„ฐ๋ฆฌ๋ฅผ ํ†ต๊ณผํ•˜๋Š” ๊ณผ์ •์—์„œ ๋ฐœ์ƒํ•œ๋‹ค. ์ด๊ฒŒ ๋ฌด์Šจ ์†Œ๋ฆฌ๋ƒ? ์••์ถ•๋œ ํŒŒ์ผ ํ˜น์€ ์•„์นด์ด๋ธŒ ํŒŒ์ผ์—์„œ ํŒŒ์ผ๋ช…์ด ์ ˆ๋Œ€๊ฒฝ๋กœ ๋กœ ํ‘œ์‹œ๋œ ๊ฒฝ๋กœ ๋ช…์œผ๋กœ ๋˜์–ด ์žˆ๋Š” ๊ฒฝ์šฐ, Unarchive ๋˜๋ฉด์„œ...

PermX - WriteUP

ํ•ด๋‹น ๋ฌธ์ œ๋Š” https://app.hackthebox.com/machines/PermX ์—์„œ ํ™•์ธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. Editorial ์‹œ์Šคํ…œ ๋ชจ์˜ ์นจํˆฌ ์ˆ˜ํ–‰ ๋‚ด์šฉ vHOST ํƒ์ƒ‰์œผ๋กœ lmsํ•˜์œ„๋„๋ฉ”์ธ ์‹๋ณ„ Chamilo lms CVE ์‹๋ณ„ ๋ฐ ํŒŒ์ผ ์—…๋กœ๋“œ ์ทจ์•ฝ์ ์„ ํ†ตํ•ด ...

HA Joker CTF

ํ•ด๋‹น ๋ฌธ์ œ๋Š” https://tryhackme.com/r/room/jokerctf ์—์„œ ํ™•์ธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. Dreaming ์‹œ์Šคํ…œ ๋ชจ์˜ ์นจํˆฌ ์ˆ˜ํ–‰ ๋‚ด์šฉ ์ •๋ณด ์ˆ˜์ง‘ ๋””๋ ‰ํ„ฐ๋ฆฌ ๋ถ€๋ฅดํŠธ ํฌ์‹ฑ์œผ๋กœ /app ๊ฒฝ๋กœ ํ™•๋ณด pluck CMS 4.7.13 ์˜ CVE๊ฐ€ ์กด์žฌ ์›น์‰˜...